PT-2025-38065 · Tuya · Tuya Smart Life App

Ph4Ng0T · Published 2025-09-16 · Updated 2025-10-02 · CVE-2025-56557

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Tuya Smart Life App versions 5.6.1

Description An issue discovered in the Tuya Smart Life App allows attackers to gain unprivileged control of Matter devices via the Matter protocol.

Recommendations Update to a newer version of the Tuya Smart Life App that addresses this issue.

Fix

Weakness Enumeration

CWE-250

Related Identifiers

CVE-2025-56557

Affected Products

Tuya Smart Life App

References · 6

• https://osv.dev/vulnerability/CVE-2025-56557 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-56557 · Security Note
• https://archive.org/details/tuya-matter-fabric-bug/mode/2up · Note
• https://t.me/cveNotify/137241 · Telegram Post
• https://twitter.com/CVEnew/status/1969291992715723124 · Twitter Post
• http://tuya.com · Note